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© Intrusion detection apparatus for local area network. 



CO 
< 

o> 

00 

CO 
O) 



Q. 
Ui 



© Intrusion detection is afforded for local area net- 
works by including one or more intelligent hub units 
connected to the stations in the network. The intel- 
ligent hub unit maintains a list of codes identifying 
those stations and units connected locally to ports of 
the intelligent hub unit. When a station initiates a 
message on the network, a source identifier code 
unique to the sending station is incorporated in the 
message as specified by the standard access pro- 
tocol At the intelligent hub unit, the source identifier 
code is recovered from the received message and 
the port at which the message was received is 
id ntified. The received source identifier code is 
compared with the particular entry in the stored list 
of codes corresponding to the identified port. If the 
comparisons fail to generate a matching condition 
between the source identifier and the particular entry 



in the list of codes, then the intelligent hub unit 
generates an alarm indicative of an intrusion on the 
network. 
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